Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAA01B40CF5B11EF9EBE3EB6762E951A.roa
File: BAA01B40CF5B11EF9EBE3EB6762E951A.roa (raw, json)
Hash identifier: 8y7UX8MQc6SGmFS7wJ8NtMNkK+WbHz42x7SsINJnvSc=
Subject key identifier: CC:9A:A0:DD:24:33:0F:0E:FD:92:3E:30:57:2B:DD:CF:37:76:F1:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAA01B40CF5B11EF9EBE3EB6762E951A.roa
Signing time: Fri 10 Jan 2025 14:03:55 +0000
ROA not before: Fri 10 Jan 2025 14:03:51 +0000
ROA not after: Wed 10 Dec 2025 14:03:51 +0000
asID: 984
IP address blocks: 154.82.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80365 (0x139ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 14:03:51 2025 GMT
Not After : Dec 10 14:03:51 2025 GMT
Subject: CN=678128cb-6187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:64:35:fe:54:4a:48:ba:91:19:bf:ae:32:
69:34:6b:10:85:6a:9b:87:59:e7:a7:ad:bc:a2:f1:
0f:26:83:53:12:fd:28:97:93:fa:c0:0b:29:d4:d9:
ee:c7:bd:4b:e8:5b:f8:ec:39:bd:40:38:51:7f:13:
79:ec:c1:d4:ec:12:7b:a2:80:95:18:25:b9:ed:2c:
69:41:3b:57:09:47:4d:ce:54:b3:92:91:c4:c1:73:
e1:24:98:3a:ea:c2:a4:f6:3c:ad:f9:66:dd:b7:22:
5f:aa:41:d7:7f:1c:24:21:f1:e4:d6:a4:42:c0:ab:
6e:40:70:91:5d:90:3e:cd:83:ca:28:b8:15:15:6a:
68:7f:cb:77:3e:0f:08:31:b1:d4:f3:32:38:00:20:
4e:a0:23:cf:29:11:08:cd:02:4b:f4:8b:39:44:af:
be:3d:49:e7:40:d8:6e:9e:f3:2d:66:c3:0b:67:d5:
3a:51:b5:7c:b6:fa:67:e3:36:27:d3:ce:89:61:d4:
a5:be:26:ec:f2:65:79:72:b8:78:83:79:50:ec:ea:
8e:52:1d:2a:1e:fa:d9:0a:e6:55:c7:c3:74:8a:63:
b5:d5:69:78:46:a9:e5:7f:e5:80:db:18:81:c3:fc:
1c:bd:20:a9:e4:e4:cf:48:d8:96:7d:fc:55:8e:47:
16:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9A:A0:DD:24:33:0F:0E:FD:92:3E:30:57:2B:DD:CF:37:76:F1:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAA01B40CF5B11EF9EBE3EB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.220.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:0a:3b:19:fd:53:fc:5e:89:35:2e:04:d0:4d:b9:07:38:98:
3c:fb:c9:f4:05:0d:45:df:d2:56:ea:45:9e:ec:bb:3b:56:33:
97:97:81:ad:41:3c:0c:f3:30:e9:ed:27:e1:46:5c:29:34:41:
41:af:7e:cf:1c:28:3e:76:9f:1b:ed:7a:89:c6:04:3c:24:8a:
3b:00:cc:06:2a:72:18:60:0a:e9:50:3c:c7:0a:25:70:f2:c8:
43:da:96:95:ca:ff:83:d7:20:ee:7d:0a:4a:b5:c4:c3:ad:0e:
e8:e8:2c:2c:b3:89:28:ed:50:6f:96:d0:4a:d5:4b:36:3d:6b:
5d:5f:7a:19:fe:26:a6:8a:8e:35:08:bc:c7:bc:21:da:1d:2a:
a2:91:df:d4:35:9f:04:49:9f:65:37:34:14:37:35:55:c0:ce:
1e:65:96:59:fc:b1:9c:b8:af:49:14:f3:e7:4a:7a:30:c6:3e:
2a:9e:1d:e2:34:f9:94:47:20:ee:00:6a:2a:6a:e3:67:79:1c:
da:37:ad:0b:7b:8f:38:81:fd:82:a8:ba:c9:51:06:d9:cb:a5:
41:79:13:79:3f:aa:d3:ac:05:e4:21:86:80:26:23:b1:3f:5f:
ca:9a:5c:ba:16:e4:4e:fd:1d:31:c4:0b:74:ef:df:28:8e:a7:
dc:a3:4f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:46:50 2025 by rpki-client